GRC Engineer

Job Summary

To support a growing financial operating system for the gaming economy, the full-time remote GRC Engineer will design, implement, and maintain security compliance frameworks and risk management programs while collaborating with software engineers to enhance ZBD's security posture.

Key Responsibilities

• Conduct cybersecurity risk assessments and third-party/vendor risk evaluations to ensure consistency and scalability
• Identify and address security and policy gaps in existing systems, recommending enhancements to improve security posture
• Ensure compliance with relevant frameworks such as SOC 2, DORA, GDPR, and PCI DSS by maintaining security solutions and documentation

Required Qualifications

• 3+ years of experience in security governance, risk management, and cloud/application security assessments
• Thorough understanding of cybersecurity principles, cloud security, and identity and access management
• Demonstrated experience with Infrastructure as Code using Terraform/OpenTofu
• Working knowledge of Linux and experience with metrics gathering and CI/CD pipelines
• Ability to design, implement, and improve cybersecurity solutions while balancing business initiatives